Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pc1nltEJVfgsd3cykYJeKrkn0Cg.roa
File: pc1nltEJVfgsd3cykYJeKrkn0Cg.roa (raw, json)
Hash identifier: J7DTUbEUHKR1aOKzi/TNH5BlqHlB+k8MwVN7F5JJvLc=
Subject key identifier: A5:CD:67:96:D1:09:55:F8:2C:77:77:32:91:82:5E:2A:B9:27:D0:28
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970F4CB6FA70FCDEB591E935CF1211198F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pc1nltEJVfgsd3cykYJeKrkn0Cg.roa
Signing time: Tue 27 May 2025 01:12:54 +0000
ROA not before: Tue 27 May 2025 01:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 02:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0f:4c:b6:fa:70:fc:de:b5:91:e9:35:cf:12:11:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 01:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5cd6796d10955f82c77773291825e2ab927d028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:e9:d5:c9:ad:4d:2e:75:6a:71:2d:bf:6e:
fa:df:dd:cc:e5:a4:ec:e3:3c:54:2e:f5:af:1d:d2:
4a:47:6e:da:5f:97:7f:7e:f0:4c:fa:79:01:e4:35:
f8:d2:39:e5:fb:d2:6c:79:01:e5:9e:8e:98:be:e2:
af:6f:7c:56:96:90:01:71:e0:e3:8c:7e:b4:19:7e:
4a:51:a0:e6:98:78:d8:d2:73:06:e6:cf:ff:0a:11:
18:11:87:db:02:9e:20:9a:cd:eb:af:9b:5b:9a:e3:
7c:4b:04:d3:52:a9:e5:22:15:6e:0b:c0:e3:4f:9f:
b1:88:e3:03:63:79:15:70:51:71:33:99:bf:f9:af:
36:fa:bb:cd:d0:70:2a:58:21:90:b7:06:8d:41:5c:
bd:d0:ef:1d:f9:c5:71:4d:32:33:79:d8:fb:ff:fc:
c6:04:cf:65:62:33:72:05:fa:ed:48:8f:93:6e:27:
fc:58:5e:e5:53:96:d0:3f:b7:7b:d2:6d:35:e9:5c:
21:cc:2f:3c:d7:97:68:d7:a2:8e:27:65:28:bf:b1:
d6:eb:0c:d0:cd:7a:30:d9:b4:ea:86:e0:a5:ab:7d:
0a:e0:d3:94:34:ca:b6:04:27:73:4a:12:25:fe:d3:
10:19:43:4a:b7:13:aa:29:e7:77:13:01:5b:8d:51:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:67:96:D1:09:55:F8:2C:77:77:32:91:82:5E:2A:B9:27:D0:28
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pc1nltEJVfgsd3cykYJeKrkn0Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
54:ab:a0:aa:3e:2b:39:ae:7d:ae:c1:ea:55:b5:d9:a3:b6:b6:
ba:97:bd:72:35:9e:9c:60:b4:c6:d8:5b:cf:e9:65:08:7a:9a:
10:39:d1:4e:59:4b:56:72:fb:59:02:0c:4e:32:21:b3:7a:b3:
89:49:b1:ad:95:d5:b3:3c:17:2b:f4:56:c6:45:45:ed:17:5e:
8f:ab:0e:e6:fa:14:92:04:23:04:45:bd:76:a1:a7:08:f8:7b:
a4:db:39:f8:79:62:18:a1:32:fc:a9:c0:62:fc:c4:33:ed:23:
ee:d7:41:c8:4c:95:c3:9c:2d:e6:41:32:74:98:6f:23:36:04:
74:82:af:35:cd:af:26:80:3c:48:31:74:d8:ed:66:fa:69:e2:
1c:69:d0:b2:ac:22:89:8d:a5:98:f4:d9:87:a3:f4:fb:45:44:
de:58:64:48:46:9a:22:2e:37:c0:4f:48:c9:a1:bf:79:14:47:
da:75:a2:67:62:41:f5:4c:81:42:08:30:6d:02:20:fc:10:b8:
3f:99:7e:75:cb:86:3d:8b:69:97:0b:03:f3:09:8b:cc:36:a9:
69:f7:05:97:d6:f3:1f:30:ae:f2:33:d1:b2:4d:ae:0a:d2:39:
a3:e3:2c:7f:63:39:82:04:25:e9:19:6e:83:4e:72:fd:af:94:
f4:97:0b:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:27 2025 by rpki-client